Data processing & security
Information Security Measures
The security topics GICT reviews when designing and operating a contracted service.
GICT Technologies Africa Ltd is based in Kampala, Uganda. This document should be read with the accepted order or signed agreement that applies to the service, where relevant.
Check the roles, services and providers in your accepted order and any signed data processing addendum.
Security by scope
The controls for a project depend on what GICT operates and what the customer or upstream provider operates. The accepted order should identify the system boundary, administrative access, backup responsibility, monitoring and incident contacts.
Baseline practices
GICT’s service design considers access restriction, multifactor authentication where supported, supported updates, protected credentials, logging, backups and restore procedures. A security assessment or managed control is included only when it appears in the accepted scope.
Incidents and verification
Customers should report suspected incidents through the agreed support channel. GICT and the customer should coordinate containment, evidence preservation, notification and recovery according to their signed roles. No certification, independent audit result or guaranteed detection time is claimed by this page.